The Commission has published its final determination and final rules allowing the Australian Energy Market Operator (AEMO) to share confidential information directly with certain third parties that registered participants (RPs) are already permitted to share information with.

The final rules will enable AEMO to implement upgrades to its identity and access management (IDAM) system by mid-2027. This will improve the governance and security of market information.

Our final rules are consistent with the draft rules, and will:

• Allow AEMO to share confidential information directly with existing specific third parties (relevant disclosees), consistent with pre-existing confidentiality obligations and guided by disclosure principles.
• Extend and align confidentiality and indemnity obligations across National Electricity Rules (NER) and National Gas Rules (NGR) to cover disclosures made directly by RPs and by AEMO to authorised relevant disclosees.  
• Require AEMO to develop procedures that include the process for authorisation and conditions for access to AEMO’s systems, consistent with the disclosure principles.
• Without otherwise limiting access, disallow RPs from sharing means of electronic access to National Metering Identifier (NMI) standing data with service providers.

AEMO will be required to make procedures under both the NER and NGR by 1 March 2027, when the rules will commence.

Background

As part of broader efforts to support the energy transition, AEMO is upgrading its platforms through which RPs access information to improve industry access, enhance operational efficiency and strengthen data security.

A key feature of these upgrades is the ability for authorised parties acting on behalf of RPs to access confidential information directly within AEMO systems using their own verified credentials.

Under the previous rules, RPs were allowed to disclose confidential information with certain relevant disclosees; however, AEMO was not explicitly authorised to do so and therefore could not issue login credentials directly to relevant disclosees.

Rule change process

On 15 May 2025, the AEMO submitted a rule change request that sought to enable it to share confidential information directly with authorised third parties who could already receive this information directly from market participants. For example, the disclosure could be via the provision of unique system logins for those third parties.  

On 9 October 2025, we initiated consultation on this request. On 18 December 2025, we extended the publication of the draft determination to 5 February 2026, as the rule change request raised issues of sufficient complexity or difficulty.  

We published the draft determination and more preferable draft rules on 5 February 2026.